Windows Shell Security Feature Bypass Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912
Patch Tuesday
Patch Tuesday February 2026 – known issues, zero-days and what to do
On 10 Feb 2026 Microsoft fixed 61 vulnerabilities – critical: 7, already exploited (zero-days): 6. Known issues with the updates: none known.
61vulnerabilities
7critical
6zero-days
0known issues
What to do now
- Zero-days first: 6 vulnerabilities are already being exploited (CVE-2026-21510, CVE-2026-21513, CVE-2026-21514) – install the updates as soon as possible, starting with servers and exposed systems.
- 7 critical vulnerabilities (mainly Windows, Azure, Microsoft Office) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
MSHTML Framework Security Feature Bypass Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943
Microsoft Word Security Feature Bypass Vulnerability
Microsoft Office
Desktop Window Manager Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5077179 KB5075904 KB5075906 KB5075943
Windows Remote Access Connection Manager Denial of Service Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5075904 KB5075906 KB5075943 KB5075912
Critical vulnerabilities (7)
Azure Front Door Elevation of Privilege Vulnerability
Azure
Windows Admin Center Elevation of Privilege Vulnerability
Windows
Azure Arc Elevation of Privilege Vulnerability
Azure
Azure Function Information Disclosure Vulnerability
Azure
Microsoft Teams Information Disclosure Vulnerability
Microsoft Office
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
Azure
Show 1 more critical vulnerabilities
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5075899 | Windows | 29 | none known |
| KB5075906 | Windows | 27 | none known |
| KB5075943 | Windows | 27 | none known |
| KB5075904 | Windows | 24 | none known |
| KB5075912 | Windows | 24 | none known |
| KB5075942 | Windows | 18 | none known |
| KB5077179 | Windows | 16 | none known |
| KB5077181 | Windows | 5 | none known |
| KB5002835 | Microsoft Office | 3 | none known |
| KB5002837 | Microsoft Office | 3 | none known |
| KB5075897 | Windows | 3 | none known |
| KB5077212 | Windows | 3 | none known |
Show 15 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5002841 | Microsoft Office | 2 | none known |
| KB5002840 | Microsoft Office | 2 | none known |
| KB5002834 | Microsoft Office | 2 | none known |
| KB5002836 | Microsoft Office | 2 | none known |
| KB5002833 | Microsoft Office | 2 | none known |
| KB5002839 | Microsoft Office | 2 | none known |
| KB5075941 | Windows | 2 | none known |
| KB5075999 | Windows | 1 | none known |
| KB5077862 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5077863 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5077864 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5074992 | Windows ESU (Extended Security Updates) | 1 | none known |
| KB5074995 | Windows ESU (Extended Security Updates) | 1 | none known |
| KB5074993 | Windows ESU (Extended Security Updates) | 1 | none known |
| KB5074994 | Windows ESU (Extended Security Updates) | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.